System Threats

System Threats

1. Malware

   • Malware is a piece of software that is written to infect computers and commit crimes such as fraud. If a computer used for shopping, banking and email you are putting yourself at high risk of victimized
     • Effects of malware could be that the computer crashes or reboots instantly or slow down without any logical explinations. If a worm infects a computer, the internet connection will become slow as the worm searches for other computers. Files maybe deleted, become corrupt or encrypted. Malware can also record what is being pressed on the keyboard so the hacker can get usernames and then find the password
       • // Download and update regularly strong security software (firewall, spam filter, anti-virus, anti-spyware, anti-spam) // Enable OS updates // Staff training: caution opening attachments // Back up files regularly
     • Trojan horse program
       • They spread viruses and worms by email, instant messages and mobile phones
     • Spybots
     • Worms
       • Slow down the internet in search for other computers to hack.
     • Scareware
       • Is designed to trick people into purchasing and downloading useless and potentially dangerous software

2. Denial of service attack

   • Flooding a server with useless traffic causes servers to become overloaded preventing them to respond to legitimate client-server requests from users. DoS is a type of attack where multiple compromised systems, which are often infected with a Trojan, are used to target a single system causing a Denial of Service attack.
     • An effect of DoS attack is productivity loss, Reputation damage and revenue losses.
       • // Strong security software (firewall) // Packet filters on routers // Configuration of the webserver // Good network policy: audits, logs, monitoring
       • Productivity loss is when critical network systems are shut down, your workforce's productivity comes to a halt
       • Reputation damage is when your brand suffers if customers can't access your site or becomes casualties of a data breach
       • Revenue losses is when downtime affects profits. Based on industry surveys, the average cost of downtime is over £4000/minute

3. Data interception

   • When a hacker monitors data streams to and from a target usually using a data sniffer packet
     • An effect of this is discovering usernames and passwords and gaining access to systems. Disclosure of corporate data and theft of data
       • // Strong encryption // Using virtual networks // Staff training: use of passwords, locking and portable storage devices // Network forensics

4. Brute force attack

   • When a trail and error method is used to try and guess a person's password
     • An effect of brute force attack is that people haver access to corporate systems and theft of data.
       • // Network lockout policy: locks out after number of tries expires // Effective software: progressive delays // Staff training: using effective passwords that contain symbols and numbers // Challenge response tests e.g. reCAPTCHA
         • reCAPTCHA

5. Phishing

   • Is an online fraud technique to get personal details such as usernames and passwords. It is the fastest rising method of cyber crime. Phishers use emails with links to fake websites that look like the real website. The purpose of phishing is to gain personal details
     • Access people's accounts to get money or buy merchandise. Another effect is the phisher can open a new account in the victim's name or gain access to high-value corporate data and to Financial services can blacklist institutions, resulting in reputational damage
       • // Strong security software (firewall, spam filter, anti-virus, anti-spam). // Staff training: awareness of spotting fake websites & emails. // Staff training: never disclose personal or financial information. // Staff training: disable pop-ups
   • Social Engineering
     • When Hackers take advantage that humans are the weakest part of a computer system and they try to trick them, bribe them or threaten them to get information.

6. SQL injection attack

   • Is a code injection technique used to attack data-driven applications. If a database application has not been coded in a secure way, code can be entered into text boxes and will be executed by the server
     • Effects of SQL injection could be that contents of a database can be outputted, revealing data that is meant to be hidden. Also data in the database can be amended and deleted. It also allows hackers to create new rogue records can be added
       • // Validation of input fields. (To stop people entering sql code) // Penetration testing (To see how far into a system)

Imágenes y archivos del mapa